$ rpki-client -vvvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: I2qS/OiC6p01ZFxMxr9VTMDQhwVLH29rotSDluRjfdQ= Subject key identifier: EE:8B:93:C4:E8:30:20:B3:27:22:70:63:2A:CA:F4:A4:21:07:5F:8A Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 359F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 358E Signing time: Sun 04 Oct 2026 14:34:46 +0000 Manifest this update: Sun 04 Oct 2026 14:34:45 +0000 Manifest next update: Sun 11 Oct 2026 14:34:45 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: uvhVZktH8xfHMOieDMwgZ/JEOH58mYrIg464uV9VyjQ=) 2: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: Z7MnSNSHBqpmgGDUQHMm4xL2DZm8ZBR3qNJ9ominL6g=) 3: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: a8UAQgdr5YefPf6e/FxqB3qO2kRWk0And4FOBUzigKo=) 4: 532313EE89FB11F1A2C97EB45E11F970.roa (hash: ONFD8eO0BeKQA05+Fmoa39A39KmAUsRQvy6sAW3EDUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 14:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13727 (0x359f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: Oct 4 14:34:45 2026 GMT Not After : Oct 11 14:34:45 2026 GMT Subject: CN=6ac26406-3fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cd:35:cf:fd:da:ef:fd:e3:bf:40:59:27:cb: 78:28:38:84:3e:4c:65:0a:7d:ba:81:21:31:43:b9: b1:29:40:c4:62:e3:c0:f7:b6:19:83:ba:59:98:00: 1b:d0:9f:84:59:40:e0:bd:cd:10:75:74:f5:e0:f8: aa:6f:94:30:41:34:79:db:1a:be:b1:97:37:9a:7c: 6f:48:e9:95:26:64:2a:2a:c5:08:69:a5:33:cd:23: 69:26:72:3a:cc:86:83:66:53:fe:ca:9b:ee:85:47: 53:56:74:9b:af:9a:21:e1:0d:5a:e5:08:c1:de:35: e5:01:e6:0f:80:9e:85:76:c4:4f:7b:73:7c:48:3f: e8:20:54:e6:5a:ae:28:f1:a2:e9:f5:0a:73:85:c9: 16:67:49:91:23:74:4c:09:51:14:2e:ab:d8:8e:c6: f9:91:c2:38:c0:c5:0a:4f:6e:a2:f1:3c:6f:f9:f6: 33:18:99:bf:2e:2b:70:ae:49:fc:62:03:d2:d0:63: 4b:b6:59:08:db:bd:85:a0:0a:78:8f:38:9c:ba:a2: 03:09:a1:b3:ab:c0:63:e5:e1:9b:a7:6c:ad:0f:33: 89:01:80:d0:1c:c0:8d:4f:d1:28:f2:6f:bf:f7:cc: 55:7c:94:a4:3b:4e:d7:ec:0c:4f:22:3d:7b:03:72: de:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8B:93:C4:E8:30:20:B3:27:22:70:63:2A:CA:F4:A4:21:07:5F:8A X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:3a:22:96:07:26:24:1c:08:7b:b2:57:c0:90:72:f3:09:87: c4:de:19:15:db:7b:08:99:d0:9d:2b:40:76:cc:a1:7f:0a:c3: 90:b3:56:18:e8:b0:3c:21:75:37:08:03:21:6f:33:41:17:de: b4:f8:80:e4:3e:b5:9e:9c:dc:cb:38:71:ba:be:5f:d0:cd:07: f9:c4:7e:1a:d8:6e:14:90:17:02:50:d5:ae:37:c6:b0:58:a4: e4:80:2b:61:5a:c1:c9:29:45:9a:ce:d1:80:a8:04:bc:5b:f1: 45:09:dd:70:17:9f:04:9d:0f:7e:c7:d2:18:8f:59:4e:af:5c: 4b:5f:dc:23:02:a6:ab:5c:91:40:df:29:f2:63:19:c5:1d:09: 91:94:15:aa:bd:7a:d1:04:f2:ec:3a:61:82:32:5d:2a:54:c0: ee:2b:7e:f8:1b:a5:bb:a4:86:72:23:69:5b:e7:8f:b9:60:44: 22:5f:d7:22:c2:18:5a:d9:f0:eb:a6:df:4f:70:08:be:b5:77: 08:d5:61:cd:45:64:6a:ec:06:64:bd:8e:c0:bf:e0:98:9b:66: 2d:ab:e7:27:bc:62:04:5e:c3:1b:01:a9:df:2c:de:fe:6c:c3: 6e:b6:07:a1:8b:1a:b7:e8:6e:30:23:47:12:7c:63:c3:a2:8e: 88:67:0f:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjYxMDA0MTQzNDQ1WhcNMjYxMDExMTQzNDQ1WjAYMRYwFAYD VQQDEw02YWMyNjQwNi0zZmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvs01z/3a7/3jv0BZJ8t4KDiEPkxlCn26gSExQ7mxKUDEYuPA97YZg7pZmAAb 0J+EWUDgvc0QdXT14Piqb5QwQTR52xq+sZc3mnxvSOmVJmQqKsUIaaUzzSNpJnI6 zIaDZlP+ypvuhUdTVnSbr5oh4Q1a5QjB3jXlAeYPgJ6FdsRPe3N8SD/oIFTmWq4o 8aLp9QpzhckWZ0mRI3RMCVEULqvYjsb5kcI4wMUKT26i8Txv+fYzGJm/Litwrkn8 YgPS0GNLtlkI272FoAp4jzicuqIDCaGzq8Bj5eGbp2ytDzOJAYDQHMCNT9Eo8m+/ 98xVfJSkO07X7AxPIj17A3LeuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO6Lk8To MCCzJyJwYyrK9KQhB1+KMB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHjoilgcmJBwIe7JXwJBy8wmHxN4ZFdt7CJnQnStAdsyhfwrDkLNWGOiwPCF1 NwgDIW8zQRfetPiA5D61npzcyzhxur5f0M0H+cR+GthuFJAXAlDVrjfGsFik5IAr YVrBySlFms7RgKgEvFvxRQndcBefBJ0PfsfSGI9ZTq9cS1/cIwKmq1yRQN8p8mMZ xR0JkZQVqr160QTy7DphgjJdKlTA7it++Bulu6SGciNpW+ePuWBEIl/XIsIYWtnw 66bfT3AIvrV3CNVhzUVkauwGZL2OwL/gmJtmLavnJ7xiBF7DGwGp3yze/mzDbrYH oYsat+huMCNHEnxjw6KOiGcPQQ== -----END CERTIFICATE-----Generated at Tue Oct 6 08:26:06 2026 by rpki-client